Professional Documents
Culture Documents
MorphoManager User Manual
MorphoManager User Manual
MorphoManager User Manual
Contents
Introduction ......................................................................................................................................5
Support .............................................................................................................................................5
Overview ...........................................................................................................................................6
What is a client? .......................................................................................................................................... 6
What is a server? ......................................................................................................................................... 6
What is a fingerprint enrollment device? .................................................................................................... 6
What is a Biometric Device? ........................................................................................................................ 7
Setting up MorphoManager .............................................................................................................8
Computer hardware requirements: ............................................................................................................ 8
Supported Operating Systems: .................................................................................................................... 8
Installation of MorphoManager software ................................................................................................... 8
Setting up MorphoManager on a single PC ......................................................................................9
Server and Client Installation ..........................................................................................................10
Product Registration .......................................................................................................................11
Procedure for registration ......................................................................................................................... 11
Activate Online ....................................................................................................................................................... 12
Activate Offline ....................................................................................................................................................... 13
Advanced Client Configuration .......................................................................................................15
Advanced Server Configuration ......................................................................................................17
Server Manager ...............................................................................................................................19
Running MorphoManager Login .....................................................................................................19
Home Screen ...................................................................................................................................20
Administration ................................................................................................................................21
Operator .................................................................................................................................................... 21
Creating a new Operator ........................................................................................................................... 21
Screen 1 – Operator Details .................................................................................................................................... 21
Screen 2 – Operator Roles ...................................................................................................................................... 22
Key Policy .................................................................................................................................................. 23
Creating a new Key Policy ......................................................................................................................... 23
Screen 1 – Key Policy Details................................................................................................................................... 23
Screen 2 – MIFARE Classic Key Settings .................................................................................................................. 23
Screen 3 – MIFARE DESFire Key Settings................................................................................................................. 24
Screen 4 – iClass Key Settings ................................................................................................................................. 24
Screen 5 – Bioscrypt 4G Site Keys ........................................................................................................................... 24
Screen 6 – Certification Management .................................................................................................................... 25
Lock & Unlock ............................................................................................................................................ 26
Biometric Device Profile ............................................................................................................................ 27
Creating a new Biometric Device Profile (Express) .................................................................................... 27
Screen 1 – Configuration Details ............................................................................................................................. 27
Screen 2 – Biometric Device Settings ...................................................................................................................... 29
Screen 3 - Multi-Factor Mode Settings ................................................................................................................... 30
Screen 4 – Access Control Mode Settings ............................................................................................................... 31
Screen 5 – Function Key Mode for MA 100, J, 500, and VP Family ......................................................................... 33
Screen 6 – MA Sigma, Sigma Lite, Sigma Lite +, & Morph Wave Settings ............................................................... 34
Screen 7 – MA Sigma, Sigma Lite, Sigma Lite +, & Morph Wave Settings (continued) ............................................ 35
Screen 8 – Function Key Mode for MA Sigma, MA Sigma Lite, MA Sigma Lite+ and Morph Wave Key Mode
Settings ................................................................................................................................................................... 36
Screen 9 – MA Sigma, MA sigma Lite+, and Morph Wave Custom Media Files ...................................................... 37
Screen 10 – Morpho 3D Face Settings .................................................................................................................... 37
Screen 11 – Video Phone Server Settings ............................................................................................................... 38
Creating a new Biometric Device Profile (Advanced) ................................................................................ 38
Screen 2- Advanced Parameters for MorphoAccess 100, 500, J, and VP ................................................................ 38
Screen 5 – Morpho 3D Face Settings ...................................................................................................................... 39
Creating a new Biometric Device Profile (External) ................................................................................... 40
Biometric Device ....................................................................................................................................... 41
Create a Biometric Device....................................................................................................................................... 41
Modify a Biometric Device ...................................................................................................................................... 43
Introduction
MorphoManager is the latest generation of biometrically powered Access Control and Time &
Attendance capture software. The software works with Biometric Device hardware to capture user’s
finger prints, photos, and personal details. The fingerprint information is sent to specified Biometric
Devices where access control is required and where users clock on and off throughout the day.
MorphoManager also works with Morpho 3D Face Readers to capture user’s facial traits.
Support
Please contact your installer for additional support.
Overview
A MorphoManager system consists of four components:
• A MorphoManager Server
• At least one MorphoManager Client
• A fingerprint/finger vein/hand/3D Face enrollment device.
• At least one Biometric Device.
What is a client?
A client is a computer that has the MorphoManager Client software installed. There can be more than
one client in a MorphoManager system.
The client application provides the management of access points, enrolling of personnel, and reporting.
A PC that has the enrollment scanner connected and is used as the user registration PC. A client PC may
be used to view data and not have an enrollment device connected.
What is a server?
A server is a computer that has the MorphoManager Server software installed.
The server manages the communication between the Biometric Device and the PC and interacts with
the database. It also handles requests from clients.
The readers are connected to a computer that is running MorphoManager Client software. All
enrollment of personnel is performed using MorphoManager software. Device drivers for this hardware
are automatically installed when MorphoManager Client software is installed.
A Biometric Device such as the MorphoAccess units above are used to authenticate users and allow
access to doors. They record a log of every presentation. MorphoManager is used to manage user’s
access to a Biometric Device.
Like the Biometric Devices above, a Morpho 3D Face Reader is a Biometric Device used to authenticate
users while recording a log of every presentation. While they are also managed by MorphoManager,
they follow a different method when authenticating users.
Morph Wave
The Morph Wave is another Biometric Device, but uses the biometrics of an entire hand (three or four
fingers by default) that is swiped/waved quickly through the device.
Setting up MorphoManager
This section outlines the requirements for MorphoManager systems.
A PC can have both the client and server software installed. The server software needs to be
installed first.
The server software needs to be installed on the server PC and the client software needs to be
installed on each client PC that will connect to the server PC over a LAN or VPN connection.
The server software needs to be installed first.
For added security, many businesses and departments have chosen to dedicate a PC for
MorphoManager and often use a dedicated hub to which only the MorphoManager PC’s and Biometric
Devices connected.
Alternatively, an existing hub can be used, but it is recommended that the IP range of the
MorphoManager PC and Biometric Devices are different from the corporate PC’s.
The MorphoManager server application can be installed on a separate PC which may or may not be a
dedicated server.
Product Registration
The MorphoManager Product Registration process can be accessed by clicking Yes on the registration
prompt after logging into Morpho Manager.
If the product is not registered, MorphoManager will run for 30 days in trial mode.
On the following screen enter the installer details and click Next.
Activate Online
If you are connected to the internet you will be activated online after clicking Next on the Step 2 wizard
screen. The following screen should appear:
When the process is complete the following screen will appear. Morpho Manager is now registered.
After clicking Finish you will be taken to the MorphoManager Home Screen.
Activate Offline
If you do not have the internet, you will be shown the following screen after Step 2 mentioned in the
beginning of this registration section. From here you can click Start offline registration.
The system will prompt you to save a registration file. Choose a location, give the file a name, and click
Save.
In the Americas email the file for registration processing to cscenter@morpho.com. For the rest of the
world, please email the file to hotline.biometrics@morpho.com. Once it has been completed it will be
emailed back to you. Save it where it is accessible to MorphoManager and reopen the registration
process by clicking Yes to the registration prompt you receive when logging in to MorphoManager. You
can now click the Complete offline registration button. Find the file and click Open. This will complete
the offline registration process.
Local Computer Only: Use this setting when the client and server are installed on the same
PC.
Automatic Discovery: Used when the server is installed on a different PC to the client. The
application will attempt to automatically find a MorphoManager
server on the network. If there is a problem with Automatic
Discovery use manually specified instead. The broadcast port must be
the same as the broadcast listening port specified on the server
Enable Automatic Login: When enabled, the MorphoManager client will use the username and
password entered here to login automatically. This can be a security
problem, and should be used on clients that are secured by other
means or have only one user. It is primarily used for convenience so
the user does not have to enter their user name and password if it is
unnecessary.
Apply the settings required and click on Apply changes and then Close.
Remoting Port: This is the port that the client will communicate with the server on. It
must be the same as the one specified in the client configuration.
Remoting Hostname: This is the hostname that the client will connect to. This must be the
same as the hostname specified in the client configuration. This
should be left blank by default.
Remoting Bindto: If you have more than one IP address on your PC, and you want to
force MorphoManager to use a specific IP, please enter it here
(Advanced users only).
Broadcast Listening Port: This is the port that the auto detection of servers operates on. It
must be the same as the port specified in the client configuration.
Maximum DB Ready Delay: Maximum amount of time to wait for the database to be available.
ADO.Net Connection String: This is the connection string that will be used to connect to the
database. Enter the connection string and click Test Connection.
Ensure the connection is successful before applying changes.
Drop Database Schema: Dropping a database schema will remove all tables and all data from
the database. This is a non-recoverable operation and cannot be
undone. Revert changes will not undo this operation. A prompt will
be displayed confirming this action.
Create Database Schema: Creating a database schema should only be performed on a new
empty database or an existing database that has had a drop schema
operation performed on it. This operation will set up a database and
create all the tables and default data for MorphoManager.
Apply Changes: When all the settings are correct click Apply Changes to save the
changes.
Revert Changes: Reverts all changes back to their last saved state. A drop database
schema cannot be reverted.
Server Manager
The MorphoManager Server Manager can be found by clicking on the start menu, then selecting
“MorphoManager”, followed by “Server” and then “Server Manager”.
The server manager is used to start and stop the MorphoManager server. Stopping the server will stop
all clients from operating. This should only be performed if instructed by the support staff.
Once you have entered the correct username & password, click Login to login.
Home Screen
At the top of the home screen, there is a set of tabs (Home, Administration, User Management, MSO
Identification, Onsite/Offsite, Access Logs, and Reports) and a set of buttons on the home screen.
Select an item to enter that section.
At the bottom of the home screen is a link to MorphoManager updates. If you have access to the
internet, you will be directed to this area which will be updated with news and information regarding
MorphoManager patches and important messages.
The right hand side of the screen displays the system status and system information. System status
contains a count of the total number of Biometric Devices and their current status. It also contains a
count of the total number of users within the system and the total number of access logs. System
Information contains the installed version number, and your server serial code.
Administration
The administration section is used to configure and setup MorphoManager. Error and event logs are
also viewable in this section.
When creating or editing an item, a coloured text entry box means the information is required and
must be filled in before the item can be finished and saved.
Operator
An operator is a person who uses the MorphoManager Client software. Operators are the only people
who can login to the MorphoManager application. The Administrator operator has full access to all
functions. Other operators with limited rights can be created.
In the panel to the right, you will see that a default Operator has been created as the System
Administrator. This operator cannot be deleted or modified. This operator has access to every
part of Bio Manager and so keeping the password for this user secure is essential.
Username: This will be entered at the login screen (must be greater than 4
characters).
First / Middle / Last Name: The first, middle and last name of the operator being added
(First and Last names are mandatory fields).
Native Username / Password: This method uses the username and password entered in this
screen.
Active Directory Integration: This method uses the Windows Active directory to
authenticate passwords. The username must match an existing
user in the active directory. The active directory domain must
be specified to use this option.
Key Policy
This section allows the setting of Contactless Card keys and whether they are stored in an encrypted or
unencrypted format.
You can allow smart cards (MiFare/iClass) that have been encoded with Secure Admin or Secure Admin
Lite to be read by the MA Sigma family of devices. You can enter the site keys manually, if they are
known, or you can import the site key file that was generated in Secure Admin or Secure Admin Lite.
The device parameters on this screen will be overwritten when you use and Advanced Biometric Device
Profile.
When importing a site key file, you will need to specify a “code” to unlock the site key file. Generally
Secure Admin uses the MAC address of the PC to lock this file. You can either select your MAC address
from the dropdown list or enter the 12-character key that was used during the creation of the file. This
12 character “code” needs to match the code used during the file creation.
“Allow Secure Admin Cards” needs to be turned on/off in the Biometric Device Profile.
Add a Certificate:
After clicking Add on the main Certification Management screen, the screen above will appear. Click
Browse and find the Certification File to be utilized. Next, choose the Certificate Type (either PC or MA)
to be utilized. Lastly, enter the mandatory Certificate Password. Click Next to return to the management
page.
Only ONE PC certificate is allowed to be stored on the Key Policy. Any number of MA certificates
can be stored on the Key Policy.
If the status is Unlocked, the Lock operation will be enabled. This will prompt for the user defined key,
which once given will be sent to the Server to lock the Key Policy. The user defined key will be qualified
to ensure it’s a valid key. If it is, it will clear unencrypted data from the Server. The Key Policy cannot be
read again until the Key Policy is unlocked.
Configuration Mode: Can be either Express, Advanced, or External, but in this example
Express is selected.
Realtime Logging Enabled*: Enable this Check box to retrieve the access logs in real time.
MorphoManager will automatically retrieve the new logs instantly for
every finger presentation. By default, this setting will be disabled. It can
be enabled only after configuring the settings in System Configuration.
*The port used as the server listening port will need to be opened in
your firewall settings.
Log Retrieval Interval: Each Biometric Device is periodically polled to collect any new data and
remove stored data from memory. This is the amount of time between
each polling sequence. The default is 300 seconds.
Display Name
Encoding Code Page: This section allows you to set encoding for the display name for
downloading to MA2G devices. Your choices will be:
Duplicate Check
on Biometrics: When turned on this will check users when being enrolled for duplicate
fingerprints in the system.
Morpho Access
Heartbeat Interval: This will determine how often the system checks to see if the
Biometric Devices are online.
Key Policy: Select the Key Policy to be utilized on the Biometric Device.
These values determine the cut off point for a biometric presentation to match with a stored template.
A higher value will lead to more false rejections for people with lower quality fingerprints. Lowering the
value allows people with lower quality fingerprints to be authenticated, but if the value is too low there
is a possibility of a false acceptance. This is only enabled when the Biometric Device type has been
detected.
General Settings:
Language: Choose the language you wish to use on your Biometric Device display
screen.
If you are utilizing the Wiegand output on the Biometric Devices, you will need to set the
Wiegand Profile for the Biometric Device(s) here. The Wiegand Profile you choose for
your devices should match the one being utilized for your users which is set in the User
Policy section of this manual.
Biometric Threshold: The default is Recommended. However, it can be set to Low, High, Very
High, and Custom. Choosing the Custom setting will allow you to set
individual threshold properties for the four device types greyed out in the
screenshot above. For further detail on the Vein/ Print mode options
please see the User Policy – Screen 2 section of the manual..
It is recommended the mode set in User Policy for enrollment should be the same mode
or a more restrictive mode than the mode set in Biometric Device Policy. Using a less
restrictive mode in User Policy than in Biometric Device Profile is likely to increase the
False Rejection Rate (FRR) of biometric devices.
This area dictates the matching mode used by the Biometric Devices. This is only enabled when the
Biometric Device type has been detected.
Multi-Factor Mode: There are seven individual options and the ability to do a custom selection
for each hardware family. The options are as follows:
• Biometric Only – Select this option if the Biometric Device is used for
identification by biometrics only. With this option, a person does not
have to provide any input other than the biometric utilized by that
device for identification.
• Wiegand In – This option authenticates Wiegand Input to match
against a biometric template.
• Keypad – This option allows the user to enter a user code or a pin
number via the terminal keypad to match against a biometric
template.
• Proximity Card – This option allows Proximity Cards to be utilized with
a Proximity card capable device. Fingerprints will be stored on the
device instead of card.
• HID iClass– This option allows HID iClass Cards to be utilized with an
HID iClass card capable device.
• Mifare Classic – This option allows Mifare Classic Cards to be utilized
on a Mifare Classic capable device
It is always recommended to use Biometric Only mode. However, depending on how the
MorphoAccess will be used any of the above options can be selected.
This area sets the properties for Access Control on your Biometric Devices.
Access Control Mode: There are four modes available, None, Integrated, Stand-alone, and
Custom. The default here is Integrated, in Integrated you can set the Panel
Feedback Mode and Panel Feedback No Response Timeout properties. In
Stand-alone mode you can set the properties on Relay Enabled, Relay
Duration, Push to Exit Enabled, and Push to Exit Duration. And, lastly in
Custom mode you can set all properties.
Wiegand Out Enabled: This will determine whether or not your biometric device will output a
Wiegand value.
Panel Feedback Mode: Allows you to choose between LEDIN and RS485.
Panel Feedback No
Response Timeout: This value will determine the length of response time allowed from the
Access Control Panel.
Relay Enabled: Each Biometric Device has an on board relay that can be used to control
an external device on successful presentation of a fingerprint. Use this
option to activate the relay when a user is authenticated.
Relay Duration: If the relay is activated, this value will determine the length of activation
time.
Push To Exit Enabled: This allows the Access Panel to open a door even though the user is not
identified on device.
Push to Exit Duration: This sets the length of time the door will remain open if Push to Exit is
enabled.
Duress Wiegand Mode: This determines whether the use of Wiegand for duress finger is Disabled,
Reversed, or Custom.
Duress Wiegand Profile: If the Duress Wiegand Mode is Custom, this will set the Wiegand Profile to
be used during presentation of a duress finger.
Enable MA 500
Multi-database Mode: This will allow you to enable the Multi-database mode on this family of
devices if they have the proper license installed.
Function Key Mode: This area determines what function keys, if any, will be available on a
device (where applicable). Options in this drop down are No Keys, Two
Keys, Four Keys, or Nine Keys to be displayed on device. Each key enabled
in the list of keys can be renamed to meet individual needs for events in
Time & Attendance and Access Log records.
Screen 6 – MA Sigma, Sigma Lite, Sigma Lite +, & Morph Wave Settings
Face Detection Mode: Allows you to set the Sigma units to capture a photo when someone is
presenting to the device (this works in conjunction with the Face Logging
Mode). There are four individual options:
Disabled – Use this option if you want to completely turn off Face
Detection photo capture.
None – Will take a 1 photo for the log whether or not a face is detected.
Optional – Takes a series of pictures and choses the best face it detects
out of them for the log. However, if the user is rejected (biometric
mismatch) AND it doesn’t detect a face, no photo will be used.
Mandatory – Takes a picture in all scenarios (rejected or accepted
presentation).
Face Logging Mode: This determines whether or not Rejected, Accepted, or Rejected and
Accepted presentations to the Sigma are logged. This works in conjunction
with Face Detection Mode.
Volume: Set the device volume level to anything from 0-100 for all Sigma family of
devices and the Morph Wave.
Enable idle timeout: Allows the following to be set on the Sigma and Morph Wave devices
(video capacity does not exist for the Lite+):
Start video playback after – Set the amount of time the device is idle
before the designated video on the device for idle time starts.
Turn off screen – When enabled it sets the amount of time that the video
will run before the screen will go blank. If disabled, the video will continue
to run.
Turn off fingerprint sensor when screen turns off – When enabled it will
turn off the fingerprint sensor on the device at the same time the screen
is turned off. If disabled, the fingerprint sensor will continue to remain lit.
Keyboard Mode: Select whether a QWERTY or AZERTY keyboard will be used on the
device(s).
Secure
Communications Mode: Turn this on to use SSL communications between the Biometric Device
and the MorphoManager Server.
When using SSL Communications, the port on the Biometric Device will need to be
changed from the default which does not use SSL. This can be edited in Biometric Device.
Screen 7 – MA Sigma, Sigma Lite, Sigma Lite +, & Morph Wave Settings (continued)
Device Password: When enabled a numeric non-default password can be set for the device(s).
The password can be between four to eight digits long. Once the non-default
password has been set, the default password will need to be manually re-
entered here to reverse the change.
SecureAdmin Cards: When enabled, you will be able to use smart cards that have been encoded in
Secure Admin or Secure Admin Lite. This setting only pertains to the Sigma
family of devices. You will need to set the Secure Admin Site Keys in the Key
Policy menu.
Enable Finger
Authentication Rule: Enables the ucc.finger_bio_auth.rule Sigma parameter. When enabled, the user
will be prompted to present a fingerprint as verification.
Access Schedules: When enabled, the access schedule functionality will be switched on for MA
Sigma, Sigma Lite, Sigma Lite+ and Morph Wave.
If this system is an upgrade from MorphoManager 9.6.4 or lower, you will need to
manually rebuild all MA Sigma devices after enabling the Access Schedules option.
Screen 8 – Function Key Mode for MA Sigma, MA Sigma Lite, MA Sigma Lite+ and Morph
Wave Key Mode Settings
Function Key Mode: This area determines what function keys, if any, will be available on a MA
Sigma, MA Sigma Lite and MA Sigma Lite +, and Morph Wave Key Mode
Settings. Options in this drop down are No Keys, Four Keys, or Sixteen
Keys to be displayed on device. Each key enabled in the list of keys can be
renamed to meet individual needs for events in Time & Attendance and
Access Log records. In Sixteen Keys mode any key name field left blank
will not show as a button on the device screen.
Screen 9 – MA Sigma, MA sigma Lite+, and Morph Wave Custom Media Files
This wizard screen allows the addition of custom Video, Picture, and Audio files to be used on an MA
Sigma and MA Sigma Lite + Custom Media Files. Applying the Biometric Device Profile containing these
files to the Biometric Device will place the files onto that device.
Enrollment Capture Timeout: Time the device will attempt to capture a 3D Face during enrollment
(default 30 seconds).
Authentication
Capture Timeout: The maximum time the device will attempt to authenticate/verify a user
in verification mode.
Preview Image Type: Specifies whether to show the enrollment preview image in color or 3D
face surface mode.
Onscreen Message Timeout: The amount of time that an on screen messages will be shown to the
user.
Click Add to add the Name, IP Address and Port of your Video Phone Server. Click Save when finished.
If you have made changes to the parameters and wish to return to the original defaults on this screen,
you can simply click the Default Values button.
Screen 3 – Advanced Parameters for MA Sigma, MA Sigma Lite, MA Sigma Lite+, Morph Wave
Advanced Settings
The Threshold Settings specific to the Morpho 3D Face will be moved to this fifth wizard screen while in
Advanced mode.
Information for the wizard screens that follow Screen 3 above can be found in the section for
Creating a new Biometric Device Profile (Express).
Selecting External for your Configuration Mode allows you to set all parameters on device or via external
software that interfaces with the Biometric Device parameters. When selecting External mode this will
be the only wizard screen you will utilize.
Biometric Device
Biometric devices from three different hardware families can be added here; the MA 100, MA J, MA 500,
and MA VP family, the MA Sigma, MA Sigma Lite and MA Sigma Lite +, the Morpho 3D Face, the Morph
Wave, and the Morpho Tablet Terminal.
Export Value: This value is typically used for Access log exporting when the
MorphoManager data needs to be exported to a third-party payroll
package. It can have a maximum of 20 characters.
When the access logs are exported, the value specified here will be used
as the Biometric Device name in the output exported file. This again
depends on the particular requirements of the payroll package and the
access log exporter that is configured in the System configuration under
T&A General settings.
Time Zone: It is important that this field is entered correctly as it will affect the time
displayed on the Biometric Device and in which time zone access logs are
recorded.
Serial Number: This field is required for the Morpho Tablet Terminal device, but not
needed for the other hardware families. The serial number can be found
on the device under Settings>About Tablet>Status.
IMEI Number: This field is required for the Morpho Tablet Terminal device, but not
needed for the other hardware families. The IMEI number can be found
on the device under Settings>About Tablet>Status.
Hostname \ IP address: This value is critical. Enter the IP address of the selected Biometric Device.
The IP Address on each device must be manually assigned and must be within the IP range of the
network. The IP address must not be used by any other device on the network. An IP Address is
not needed for the Morpho Tablet Terminal hardware family.
Biometric Device Profile: This will allow a common settings and parameters profile to be set for the
device added. The profile itself is created in the Biometric Device Profile
section of Administration.
Change User
Onsite/Offsite Status: Enable if Onsite/Offsite events are to be recorded.
Onsite Key: Determines which function key on the device will be utilized to set a user
Onsite.
Offsite Key: Determines which function key on the device will be utilized to set a user
Offsite.
After all information has been entered click Finish to save the changes or Cancel to discard the changes.
You will now see the new Biometric Device in the window and its status will be Online, provided the PC
and device are correctly connected and configured. The Tasks column shows the count of the queued or
the failed tasks.
In the example screen above, the “Delete User” task failed. The message below explains the reason for
the failed task.
Toolbar Functionality
Get Logs – Will download the currently stored transactions from the Biometric Device into
MorphoManager. Inbuilt into MorphoManager is an automatic retrieval that, by default, occurs every 5
minutes.
Set Date/Time – Updates the Biometric Device’s clock to the time on the server.
This command is run automatically once a day at the time specified in the system configuration.
Rebuild – The rebuild function will remove all users from a Biometric Device and upload the users who
are permitted access. This function should only be used if the device is not operating as expected.
Unexpected behavior could occur if a device was moved from another site and contained existing users
from that site. During normal operation any users who are added or deleted through user management
are updated on the Biometric Device in real time.
Set Online – MorphoManager monitors and displays the status of every Biometric Device. If a device
has gone offline, clicking Set Online will attempt to connect to the device and go online. The status of
the Biometric Device will change to “Pending Online” while the connection is occurring. If there is a
problem connecting to the Biometric Device the status will revert to “Offline”.
Wiegand Profiles
This section allows you to view, add, edit & delete Wiegand Profiles in MorphoManager. Wiegand
Profiles define what information is output over the Wiegand Out interface of the Morpho Biometric
Devices when a user is identified. This is most typically used in conjunction with an Access Control
System.
Bit Length: Designate the overall bit length needed for your profile.
Parity: Indicates a single bit that is typically used for error detection. Parity is calculated over
one or more bits within the entire profile and can be Even or Odd.
Fixed: Indicates a value that is common to all users of this Wiegand Profile. Typical examples of
fixed values are Facility/Site codes. This value is set once in the Wiegand Profile and will then be
used by all users of this Wiegand Profile.
User: A value that can be entered during enrollment for each user. A typical example of a User
value is a User ID.
User (Proximity): Similar to the User value, this value is defined during enrollment, but is read
from a connected proximity card.
User (CSN): Similar to the User value, this value is defined during enrollment, but is read from an
ISO/IEC 14443 smart card’s serial number.
User (HID iClass/iClass SE PACS Data): Similar to the User value, this value is defined during
enrollment, but is read from the HID iClass/iClass SE PACS (Physical Access Control System)
information on the card.
User (HID iClass SEOS PACS Data): Similar to the User value, this value is defined during
enrollment, but is read from the HID iClass/iClass SEOS PACS (Physical Access Control System)
information on the card.
Once the element has been selected the details screen for that element can be populated as in
the example below. Once the screen is populated click Next.
You will be taken back to the Wiegand Profile element screen (below) and it will now be populated with
the element you just added.
Once you have built out all of the elements needed to make up your Wiegand Profile, you can click
FINISH.
User Policy
User polices are used to apply access rights and rules to all members of the group.
Users cannot exist in the database without being assigned to a User Policy. However, a
User Policy can exist without having access to any Biometric Device. This can be useful for
segregating users who, for security or other reasons, should not be stored on a device.
Screen 1 – Details
Access Mode: This value determines the access to Biometric Devices that
users in this policy will have.
Per User: Users in this policy will have access to the Biometric
Device(s) specified in the User Distribution Groups selected
for them in User Management and cannot be overridden. The
same will take place for Clients when using MSO
Identification.
Checking the Allow MA 500 database selection during user enrollment allows you to choose the section
of an MA 500 where you want to add your user. The MA 500 must have an extended license for 50k
users. When adding a new user, you will have a drop down menu of zero to four. This is where you
decide which of the five sections of the database you want to add the user to.
Access Schedule: Any Access schedules that have been created in the Access
Schedule menu (Administration / Access Schedules) will
appear in this dropdown menu.
Access times will be restricted/permitted as set up in the
Access Schedules menu.
Wiegand Profile: Select the Wiegand Profile you wish to use for users in this
User Policy.
The Wiegand Profile you choose for your users should match the one you utilize for your
biometric access devices set in the Biometric Device Profile section of this manual.
User Authentication Mode: Designate the authentication mode you wish to utilize for
user placed into this User Policy.
Show Photo Capture Page: If enabled, the Photo Capture wizard screen will be shown in
User Management when adding or editing users.
Preferred Finger One: Designate the first preferred finger for capture on the Finger
Biometric Enrollment wizard screen of User Management.
Preferred Finger Two: Designate the second preferred finger for capture on the
Finger Biometric Enrollment wizard screen of User
Management.
Preferred Duress Finger: Designate the Duress Finger to be captured on the Finger
Biometric Enrollment wizard screen of User Management.
Duress Finger can only be utilized on the Morpho Sigma, MA Sigma Lite, and MA Sigma
Lite + of readers.
Vein / Print Mode: Designate the mode to be utilized during enrollment with an
MSO VP. This mode must align with the Biometric Threshold
settings set in the Biometric Device Profile for MorphoAccess
Fingerprint Threshold. The following modes are available:
Universal Fast: Universal fast is the recommended vein/print mode. Universal fast provides the
fastest biometric capture and is an excellent trade-off between security, biometric spoofing and
ease of use. This mode offers the lowest failure to enroll rate. It is likely that users who
experience difficulties enrolling on fingerprint only devices can be successfully enrolled on
vein/print devices configured to this mode.
Universal accurate: Universal accurate is very similar to universal fast profile but with more time
allowed for biometric data capture during enrollment and matching. This mode is
recommended only when the biometrics of a significant number of users are difficult to enroll
due to extreme conditions, such as very cold temperature and/or highly damaged fingerprints.
Anti-spoofing: Anti-spoofing provides a very high level of biometric spoofing detection. Anti-
spoofing is more restrictive than universal fast and universal accurate. This mode is
recommended when detection of a physical live finger is desired. This mode requires that vein
network biometric data must be found under the skin of the finger. This mode is recommended
when a lower False Acceptance Rate (FAR) is more important than a low Failure To Enroll (FTE)
rate.
Full multimodal: Full multi-modal provides the highest level of security during biometric capture
and biometric matching. Full multi-modal is the most restrictive mode. This mode requires that
vein network biometric data must be found under the skin of the finger. This mode is
recommended when the lowest False Acceptance Rate (FAR) is more important than a low
Failure To Enroll (FTE) rate.
It is recommended the mode set in User Policy for enrollment should be the same mode
or a more restrictive mode then the mode set in Biometric Device Policy. Using a less
restrictive mode in User Policy than in Biometric Device Profile is likely to increase the
False Rejection Rate (FRR) of biometric devices
Show Finger Biometric Capture Page: If enabled, the Finger Biometric Capture wizard screen will be
shown in User Management when adding or editing users. It
can only be disabled if the Finger Biometric Enrollment
Minimum Fingers is set to None and the User Authentication
Mode is not for finger biometrics.
Wave Enrollment Minimum Hands: Designate the minimum number of hands that will be
captured during user enrollment. Options are None, One, or
Two.
Show Wave Biometric Capture Page: If enabled, the Wave Biometric Capture wizard screen will be
shown in User Management when adding or editing users. It
can only be disabled if the Wave Enrollment Minimum Hands
is set to None.
Access Schedules
Access Schedules allow access times to be set for the Biometric Devices. Up to 58 individual Access
Schedules can be created. The Access Schedules are applied to users via the User Policy section of
MorphoManager. Thus, a user’s access via the Sigma family of devices will be governed by the Access
Schedule set on their User Policy.
Screen 1 – Details
Screen 2 – MA Sigma, Sigma Lite. Sigma Lite+ and Morph Wave access schedules
This section will create Access Schedules pertaining to the MA Sigma, Sigma Lite, Sigma Lite+ and Morph
Wave devices. They allow for one or two time periods of access to be set per day on the devices. Each
time period per day can be set up in increments of fifteen minutes.
From this screen set the times needed in fifteen minute increments. If a day is not set (left blank), no
access will be allowed for users of the Access Schedule on that day.
The Access Schedules setting (page 34) needs to be enabled in the Biometric Device
Profile menu for Sigma, Sigma Lite, Sigma Lite+ and Morph Wave devices. If the setting
is disabled, the access schedules will not be applied to these devices.
Screen 1 – Details
MA 100, MA J, MA 500, and MA VP Mode: Select None or the desired authentication mode from the
dropdown menu.
Screen 2 – Details for MA Sigma, MA Sigma lite, MA Sigma Lite +, and Morph Wave Modes
for this User
Download Identifier To Device: Will download the users Wiegand Code to the MA Sigma.
Allow: Will allow smartcard coding for a user, but will not
prompt during user creation.
Allow and Prompt: Will allow smartcard encoding for a user and
will prompt to encode the card during user creation.
Template Location:
PIN Location:
Allow Start by Biometric: Allow the trigger for authentication to be started by presenting
the user’s finger to the Sigma.
Allow Start by Contactless Card: Allow the trigger for authentication to be started by presenting
the user’s smartcard to the Sigma.
Allow Start by Keyboard: Allow the trigger for authentication to be started by touching the
keyboard screen icon on the Sigma.
Allow Start by Wiegand In: Allow the trigger for authentication to be started by receiving a
Wiegand In signal to the Sigma.
Require Template Match: Makes using correct biometric template for user authentication.
Operator Role
Creating and modifying Operator roles is an advanced feature that should only be used by experienced
operators.
Select the custom commands this operator role will allow execute access to.
Select the entities this operator role will have access to and the type of access (view, add, edit, delete,
import, export).
Select the reports this operator role will have access to.
Select the user interface elements this operator will have access to.
Notifications
Setting up a Notification event will allow specific notifications to be sent when a certain condition is
met. For example, a notification when a biometric device has gone offline.
Screen 1 – Details
Access Mode: Determines what event will trigger the Notification being
generated and sent.
Select the Biometric Devices that will be monitored for the trigger type selected on Screen 1. The Filter
option in the toolbar can be used to narrow down the devices which appear on the list.
The Email List screen will allow for configuring what the emails subject line will be and to whom it will be
sent. Email addresses can be Added, Edited, and Deleted. At least one recipient must be present to click
Finish.
Clients
Clients are computers that have the MorphoManager Client software installed and communicate with a
MorphoManager server.
Computer Template Coding Options: Configures the template formats that will be coded when an
enrollment is performed using MorphoKit.
Device Template Coding Options: configures the (single) template format that will be coded when an
enrollment is performed using MorphoSmart.
This page allows setting of card template encoding priority and allows the enabling of duress finger to
be encoded on cards for the MA Sigma family of devices.
Select the Enrollment Devices you wish to utilize in MorphoManager during User enrollment. You can
specify any MorphoSmart device to use the first detected MorphoSmart for finger enrollment, or
alternatively select a specific device (if more than one is attached to this PC) or use a selected
MorphoAccess Sigma device for enrollment.
For card encoding, you can select any PC/SC device to utilize the first detected device, a specific PC/SC
device (if more than one is present) or elect to use a selected MorphoAccess Sigma for card encoding
(only on MA Sigma Multi, MA Sigma Lite and MA Sigma iClass).
Key Policy can be selected to determine the keys utilized to encode contactless cards.
Unsecure MSO
Identification Threshold: This value specifies the threshold score for positive identification on
Unsecured MSO devices. By default, the score should be set to 4000.
Lowering the score will reduce the security, but allow users with lower
quality fingerprints to be identified. Raising the score will increase
security, but users with lower quality fingerprints may not be identified.
Secure MSO
Identification Threshold: This value determines the identification threshold for Secured MSO
devices. The default value for this setting is 4 (1-10). Lowering the score
will reduce the security, but allow users with lower quality fingerprints to
be identified. Raising the score will increase security, but users with lower
quality fingerprints may not be identified.
Identification Auto Reset: If enabled, specifies the amount of time (in seconds) to display the
“Identified” screen prior to returning to presentation mode.
Not Identified Auto Reset: If enabled, specifies the amount of time (in seconds) to display the “Not
Identified” screen prior to returning to presentation mode.
Identification Sound: If enabled, a sound will be played via the computer’s speakers indicating a
positive identification has occurred.
Not Identified Sound: If enabled, a sound will be played via the computer’s speakers indicating a
not identified event has occurred.
Identification Auto Reset: If enabled, specifies the amount of time (in seconds) to display the
“Identified” screen prior to returning to presentation mode.
Not Identified Auto Reset: If enabled, specifies the amount of time (in seconds) to display the “Not
Identified” screen prior to returning to presentation mode.
Identification Sound: If enabled, a sound will be played via the computer’s speakers indicating a
positive identification has occurred.
Not Identified Sound: If enabled, a sound will be played via the computer’s speakers indicating a
not identified event has occurred.
Scheduled Reports
Scheduled reports enable the periodic generation and delivery of reports based on a predefined set of
criteria.
SMTP Settings must be configured in system configuration before a scheduled report can be
created.
Fill in the details for the scheduled report and click Next.
Select the format of the scheduled report. Options are pdf, word document, or excel spread sheet.
Select the type of report that will be generated and enter the details for that report type. The scheduled
report will use those details each time it automatically generates a scheduled report. Some report types
allow for an offset to be entered. This allows reports to be generated for a specific date range relative to
the current date e.g. A report can be set to run every week for the last seven days.
Click Next to go to the next page when the details are correct.
Enter the email subject, body of the email and the recipients.
To add a recipient, type the email address in the text box and click Add Email Address. To edit an
existing email address, select the address to change, type in the new address and click Change Selected
Email Address. To remove a recipient, select the email address and click Remove Selected Email
Address. This information will be used whenever this scheduled report is generated. Click Finish to save
the scheduled report.
To change the details of the selected scheduled report, click on Edit in the toolbar. To remove the
selected scheduled report, click on Delete. To generate the selected scheduled report now instead of
waiting for the predefined generation interval, click on Run Report Now.
Card Template
A card template is used to print ID cards for enrolled personnel.
Screen 1 - Details
Enter a name for the template and select the layout of the card.
Screen 2 - Design
Use this screen to design the layout of the card. A region is an item that can be moved around and will
be replaced by the actual data when the card is printed (e.g. First Name). A background image can also
be added for logos or artwork that is required on the card. To edit a region, click on it or select it from
the list below, and change the options using the toolbar items. The region’s alignment (left, center or
right), font and type can be changed. The size of the region can be changed by dragging the boxes on the
edges of the region. To change a background image region, select the region and click Load Image. To
remove a region, select it and click Delete Region.
Event Logs
Here you will find the history of internal actions performed by MorphoManager. A common error is a
failed attempt by MorphoManager to communicate with the Biometric Device. This situation will occur
if, for example, there is more than one Biometric Device and all are in error – this may well point to the
network hub being switched off or if power to all Biometric Device has been interrupted.
A Send to Support button is available when discussing an error with the support team. You may be
asked about the information on the screen and also asked that the log be emailed to support for further
analysis. When clicked, the log file is automatically attached to a new email using the default email client
on the PC. Where it can be examined by support staff to help determine the process needed to rectify
any fault conditions.
The “export logs” action is useful for a situation where the MorphoManager PC is not connected to the
Internet, allowing the file to be saved in a location for future reference. To export event logs, click on
Save to Disk button and save it in the location needed. The last selection allows for the start and end
date and times to be selected. Select the destination for the file and click Save.
Exception Logs
Exception logs store messages that are created by MorphoManager in the event of an internal action
not producing the expected results.
The Export Logs and Email Logs to Support icons provide the same functionality as previously outlined in
event logs.
System Configuration
Section 1 – Time and Attendance
These setting are used for manual and automatic access log exporting to a Payroll or Rostering software
package. You need to select the format you want the exported data to comply with. You may choose
from ASTROW, Commac, Preceda, Timeminder, Powerforce, RosterOn, MYOB, MorphoManager
Standard, Kronos, Pay Global (Employee ID/Wiegand Usercode), Sodb and TimeAmerica.
Click on the check box for Automatic export access log information and select a destination for the
exported file.
Enter the default file name and destination for the file. The directory MUST exist on the server computer
as the file will be saved to the server’s hard drive.
The file will be exported at the interval specified at Export access log data every.
System Event Log: Select the types of information to write to the system
event log.
Realtime Access Log Recording Settings*: These settings are to be configured to use the Realtime
Access logs for a Biometric Device.
*The port used as the server listening port will need to
be opened in your firewall settings
Default Tab
This defines the tab selected by default when MorphoManager starts.
User Management
This allows you to control how many users will appear on your User Management screen. If you have
more than the amount in the value filed, you can use filtering to find the additional users.
User Onsite/Offsite
This will be turned off by default. When turned on Biometric Devices that are set to use their
Onsite/Offsite functionality will set the users to either Onsite or Offsite in the Onsite/Offsite section of
MorphoManager. The users Onsite or Offiste status is recorded during the Get Logs task. If this is left
disabled no recording of Onsite/Offsite change is populated in the Onsite/Offsite section during the Get
Logs.
Log Management
These settings are in place to prevent any log files from becoming unmanageable due to their size. The
above values are the default values. When the log count reaches these values the oldest logs are
deleted until they are within the values specified.
Never Delete: This is the system default. Users who are disabled will never be deleted
from MorphoManager.
Delete After: Users will be deleted from MorphoManager after the assigned amount
of day set here when disabled.
Section 5 – Gateways
The Gateway settings are used to receive emails for Scheduled Reports. These settings are specific to the
Mail server. For further assistance, to configure the gateway settings, please refer to your IT support.
Automatic Certificate Binding Mode.
Section 7 – BioBridge
Completely optional, BioBridge allows you to extract user data from compatible third-party systems.
User/grouping Information can be “synced” by the BioBridge Enrollment Client when you set the
configurations for the respective third-party system. You can set “rules” for when data is synced
between both parties.
System
Choose your BioBridge compatible system from the drop down menu.
Configure connection
Connection credentials for the third-party software.
Wiegand Profile
Most (but not all) BioBridge compatible systems use a specific Wiegand format to identify
users/cardholders. This can be specified on Cards, Card Types or can be specified as a “Wiegand
Format”. Please select the Wiegand format in use from the drop down menu.
Grouping Mode
This setting determines how MorphoManager should map BioBridge users into MorphoManager User
Distribution Groups. This can be done by either automatically trying to map based on the names
(Automatic), or by manually selecting which BioBridge Access Level maps to which MorphoManager
User Distribution Group.
For vendor specific details, please refer to the separate BioBridge Quick Start Guide
manuals.
The Morpho Tablet Terminal defaults for Connector Service Port and Certificate Binding Mode can be
seen here.
This section will allow you to set the order of template types to be distributed to different families of
Biometric Devices. The order of template types will be used to determine what type of template will be
downloaded to a biometric device, based on the available template types present on each user enrolled.
Selecting to display user defined fields will show another page in the user wizard that collects the
information as set in these fields. Select the fields to display, whether or not information is mandatory,
and assign names for the fields.
User Management
Users are people who will have their biometric data (or minutia) sent to the selected Biometric Device
for identification purposes for either access control or time and attendance. Select the user
management tab to access this area.
User Details
Information about a user’s Details, Logs, and Biometrics is available when a user is highlighted in the list
of users.
Details:
If a user has been Disabled, their disabled date and the Operator who disabled them will appear on the
Details tab.
Logs:
Biometrics:
The templates captured for the user will be shown. Templates for the user can be Exported and
Imported from this screen.
User Policy: Select the User Policy that this user will belong to. This is an
important selection, as the policy will determine Biometric Device
access and other access control and time & attendance settings.
Date of Birth: Enter the date of birth of the user. This can be entered in several
different ways. E.g. 30th May 1975 could be entered in the following
ways 30/5/75, 30-5-75, 30 May 1975, 30 5 1975.
Employee ID: A company specific code that may be assigned to a user. If used for
“Time and Attendance”, this field should match the employee
number from the Payroll or Rostering software.
Biometric Device Display Name: The information displayed upon acceptance by the Biometric Device
and defaults to the First and last name of the user.
This page and the User Defined Fields page to follow are only visible if “Display Extended user policy
details” has been enabled on the selected User Policy. If so, enter the details for the selected user.
These fields are set in System Configuration>Display Options. Up to ten fields can be named and set as
mandatory.
The User ID can be put in manually or by utilizing the Randomize button. This screen is only available if
you have changed the User Policy to have a particular Wiegand Profile set, rather than leaving the
default setting of “Automatically generated random 64 bit”. Additionally, a Read Card Serial Number
button will be present if you utilize one of the Wiegand Profiles referencing Card Serial Numbers.
Position the person in front of a plain background so that all of their face is visible in the picture, similar
to a passport photo. Once the user is positioned correctly click Capture Photo. Click on the image in the
top left corner and drag towards the bottom right drawing a square around the part of the photo to
keep. This can be done many times until the correct area is selected. Click Accept Changes to accept the
changes if no camera is connected just click Next.
If the person is not available to have their photo taken, click Person not at Camera, to skip photo
capture.
If the photo is not acceptable, click Update Photo to recapture the photo. Photos can be imported and
exported using the corresponding buttons. Additional configuration options for the camera can be
changed by clicking on Configure Camera.
PIN Code: Will be utilized and appear on screen when the authentication
mode is set to one including PIN. Ex. Smartcard + PIN.
The number of hands required for full enrollment of the user is dictated by that setting in User Policy. In
order to start the captures, click on one of the hands.
If either of the following conditions occurs a “No Device” message box will be displayed when you select
a finger to enroll:
If the reader is connected correctly the following screen below will be displayed.
Move your hand through the Wave sensor which should now be illuminated. You will then see the
results of Wave 1 appear on screen. If it is successful, you will then be prompted to present for Wave 2.
If it is not successful, you will see a red X in the elements of Wave 1 that were not successful. Move your
hand through the sensor again until Wave 1 is completed.
Upon successful completion of both Wave 1 and Wave 2, the following screen will appear.
Once the enrollment is complete for Wave 1 and 2, click Next. The screen below will appear showing
captured hand and quality displayed on the right. In the event a user is not being recognized at any
Morph Wave Device, click Clear <enrolled finger> finger enrollment to allow re-enrollment.
The default fingers that the system suggests you to enroll are set at the User Group level and are
flashing orange. You do not need to use these fingers as you can click on others. However, you will
need to set at least Finger 1 from the respective drop down list after fingerprint capture.
If either of the following conditions occurs a “No Device” message box will be displayed when you select
a finger to enroll:
If the reader is connected correctly the following screen below will be displayed.
Click on a finger and have the user place their finger in the center of the scanner glass. You will then see
the print appear on screen. There are four scans performed on each finger; the first three are used to
create the biometric template. The system selects the best elements of each print and consolidates
those features, allowing a greater range of presentations to be recognized. The fourth print is used for
verification purposes. Below each enrollment image a color bar will be displayed indicating the quality of
the print as it is being captured. Green indicates quality is above recommended quality. Orange
indicates the quality is above the minimum but below the recommended quality. Operators with
administrative rights are permitted to accept fingerprints of this quality. Red indicates the quality is
below the minimum, the user must re-enroll.
Follow the instructions on screen. Green indicates ready to capture. Orange indicates that a finger is
presented but the capture has not finished yet. Check the instructions to ensure the finger is placed
correctly. When the border is red, the current finger capture is finished. Continue until all boxes are
filled.
Once the enrollment is complete, you will see the screen below (this example is utilizing a Duress
Finger). Captured finger quality is displayed on the right. In the event a user is not being recognized at
any Biometric Device with enrolled fingers, click Clear <enrolled finger> finger enrollment to allow re-
enrollment.
The key to capturing a high quality fingerprint is to visually look for a clearly presented pattern that is
centered and square with the right amount of pressure. Don’t hesitate to retry the capture if you are
unsatisfied. For assistance refer to the fingerprint capture guide. Click Finish to save the user or cancel
to discard changes.
To get the best performance from your MorphoManager software and Biometric Device hardware, care
must be taken with enrollment of users into the system. Below are examples of fingerprint capture
which could result in either false acceptance or false rejection of users at your Biometric Device. We also
suggest that the Biometric Device be mounted at a height of approximately 1 meter from the ground.
Mounting the Biometric Device at this height will facilitate full finger presentation when using the
Biometric Device. Mounting the Biometric Device significantly higher or lower on the wall makes
presentation of a full fingertip much more difficult.
Figure 1
This is an example of a finger that has been cleaned of oil by methylate spirit. Very little information is
shown on the print to develop the algorithm. This can happen if you use hand wipes or hand cleaners
prior to using the Biometric Device. If the hand cleaners are used for infection control or similar
requirements, either use the hand cleaner after using the Biometric Device or provide a hand cream
solution to replace the natural body oils stripped from the hands.
Figure 2
This is an example of a print where the person being enrolled has used only light pressure and partial
presentation of the tip of the finger. The user will have difficulty presenting the same portion of the
finger when clocking “On” or “Off” if this is allowed during enrollment. This type of enrollment could
also lead to a significant number of false acceptances which is where a user is identified incorrectly. This
is because there is little information in this portion of a fingerprint to develop a good algorithm.
Figure 3
Figure 3 shows the finger being presented in two different places on the enrollment device. The
MSO300 or 1300 will actually discard any non-matching prints and average those remaining out of the
three presentations. If the third print was in a different place again, the software would either accept
one as being a match and use that or reject the enrollment. However, matching on two prints isn’t as
good as three identical prints
Figure 4
In this example the captured finger has a large amount of oil on it and pressure was quite high on the
reader lens. This will probably work okay but is not ideal. A user needs well defined ridges and troughs
as well as intersection points in the print. These sites are the matching points used to develop the
algorithm which is the finger template that subsequent finger presentations are matched against at the
Biometric Device.
Figure 5
This is an example of the presentation required for the best possible enrollment by a user. This example
has good information like visible ridges and intersection points for development of the algorithm by the
enrollment device. A full print is presented to the window and even pressure from the finger. The print
should use as much of the finger phalange as possible.
User Actions
There are several additional functions available for user management.
Edit: Opens the already saved user details for viewing or editing.
Delete: Use with caution as the user’s details will be permanently deleted. This
operation cannot be undone.
Refresh: Refreshes the user list from the database. This will update the display with
the most current data.
Disable User: When a user is disabled they no longer have access to any Biometric Device.
All access logs and user information is retained for reporting. Disabled users
can be enabled at any time.
Export Photo: The photo stored in the User record can be saved to disk.
Add Photo: A photo from disk can be used as the user’s photo. This is useful if a camera is
not connected to the PC.
Filtering
The display of users can be filtered by clicking the Filter button. Select the required items and click Ok.
The list of users will automatically be updated using the new filter information. To return the filters to
their original state click Reset Filters. To display all users click Show All.
MSO Identification
The MSO Identification section allows for users fingerprints to be identified using the configured
MorphoSmart device.
Once the user presents their fingerprint to the MSO device an “Identified” or “Not Identified” screen will
be shown.
Identified: The identified user’s name, photo and identification score (if using an unsecured MSO device)
will be displayed.
Not Identified: If the captured fingerprint is not matched against a previously enrolled finger, the “Not
Identified” screen will be shown.
Once the user presents their hand to the Morph Wave device an “Identified” or “Not Identified” screen
will be shown.
Identified: The identified user’s name, photo and identification score (if using an unsecured Morph
Wave device) will be displayed.
Not Identified: If the captured hand is not matched against a previously enrolled hand, the “Not
Identified” screen will be shown.
Onsite/Offsite
The Onsite/Offsite tab is hidden by default. In order to access this section it will need to
be turned on in the Clients section of Administration. Once it has been checked, log out
and back into MorphoManager. Additionally, it’s functionality to record Onsite and
Offsite movement needs to be enabled via the User Onsite/Offsite section on the System
Configuration>System Functionality tab.
The Onsite section is used to show which users are currently onsite or offsite. The Onsite and Offsite
items in the tree view on the left can be expanded to show user groups. NOTE:
To manually set a user onsite/offsite, click on the User in the Main screen and click on Set User Off-Site
or Set User On-Site.
Depending on the Biometric Device Onsite mode that has been set, the users will be shown in onsite or
offsite.
Access Logs
An access log is a record of transactions recorded by the system.
To filter the display of access logs, click Filter. Enter or select the details for filtering and click Ok. To
reset the filters to their original state, click Reset Filters.
Before the access log can be exported, you need to create an Export profile. This is an initial setup
procedure and is performed only once unless you need to export to another type of time and
attendance application. The following error will be displayed if the profile(s) have not been created.
Refer to the system configuration section for instructions on configuring an access log export profile.
Once an access log exporter has been set-up, click on Export Access logs and you are presented with a
window showing the destination of the file. Enter a file name with its extension and click on Save.
Reports
The reports center has a variety of reporting options for displaying information about user activity.
List Report: Displays a list of all items in the selected category (Biometric Device,
Operators and Users)
User Policy Members Report: Displays a list of all users that are members of the selected user
policy.
Activity Reports: These reports will show all activity for the selected item type.
© Refer to End User License Agreement for Copyright Notice Page 100
MorphoManager User Manual
• Select the Biometric Device. Enter the first few characters of the name of the Biometric Device.
Select Search. Once the Biometric Device is on the screen, select the Biometric Device and click
Generate Report. If you are not sure of the name or spelling of the Biometric Device, click on
Search with an empty search box and all the Biometric Device will appear.
Inactivity Report
• Select the desired Date Range. The default Date Range is one week previous.
• Select the User Group. Enter the first few characters of the name of the group. Select Search.
Once the group is on the screen, select the group and click Generate Report.
List Report
• Select the Report type from the options Biometric Device, Operator, User and User group.
• Click Generate Report.
Permissible Report
• Select the Report type (Biometric Device or User).
• Search for the Biometric Device name or the user name and click on Generate Report.
© Refer to End User License Agreement for Copyright Notice Page 101
MorphoManager User Manual
Database Management
Database Backup Tool
The Backup Tool allows for the backup of SQLCE database. Systems running SQL Server will need to
contact Microsoft for backup information.
When you start the Database Backup Tool, you will be prompted for backup directory. Select the
directory you want to back up the database to.
The MorphoManager service must be stopped before starting the Database Backup Tool.
Browse
Click Browse to change the backup directory
Start Backup
Starts the backup process.
Copying a database
The following instructions are for upgrading the default SQL CE database to Microsoft SQL Server.
© Refer to End User License Agreement for Copyright Notice Page 102
MorphoManager User Manual
© Refer to End User License Agreement for Copyright Notice Page 103
MorphoManager User Manual
• Enter the ADO.NET connection string saved from 5.2 into the Source Database Connection String
field.
• Set the correct database type using the dropdown lists.
• Test Connections
• Copy Database
© Refer to End User License Agreement for Copyright Notice Page 104
MorphoManager User Manual
IP Address: 134.1.32.214
Subnet Mask: 255.255.0.0
Default Route: 134.1.6.1
The tool is located on the server installation in the program files menu.
© Refer to End User License Agreement for Copyright Notice Page 105
MorphoManager User Manual
Enter the existing IP address of the Biometric Device and click Connect.
The Tool can be accessed by clicking on the start menu, then selecting “MorphoManager”, followed by
“MorphoManager Biometric Device Profile Creation Tool”.
Port: Default
© Refer to End User License Agreement for Copyright Notice Page 106
MorphoManager User Manual
MA 100, MA J, MA 500 or MA VP
MA Sigma
MEMS Migrator
The MEMS Migrator tool will migrate users from the MEMS database selected into MorphoManager.
MEMS users and their groups will be migrated to User Policies and User Distribution Groups in
MorphoManager. An empty User Distribution Group will be created for every MEMS Group migrated.
Biometric Devices can then be added to the User Distribution Groups to mimic the MA(s) used in the
MEMS groups.
© Refer to End User License Agreement for Copyright Notice Page 107
MorphoManager User Manual
© Refer to End User License Agreement for Copyright Notice Page 108
MorphoManager User Manual
The tool will step the user through a series of screens filtering how data is to be migrated.
1) SecureAdmin Database Type & Connection String: Auto-detects (manual connection also
available) and tests the connection to the SecureAdmin database to be migrated into
MorphoManager
2) Template Types to Migrate: Template types to migrate can be selected or omitted on this screen
3) User Migration Options: User can select SecureAdmin User Groups and/or individual
template types to map to MorphoManager User Policy (shown below)
4) Confirmation Dialog: A dialog will be displayed indicating that continuing the migration
process will overwrite previously migrated data in the MorphoManager database with
the exception of newly captured Morpho biometric templates
5) Migration Progress: A status bar will provide the status on the migration process
6) Summary: A summary of successfully migrated users, failed users and a total of all users.
The option to export lists for both successful and failed users is also available.
© Refer to End User License Agreement for Copyright Notice Page 109
MorphoManager User Manual
Screen 1
Set the date and time to run the firmware update job. By default, it will run immediately. However, this
can be scheduled to run at a future date and time. Click Next.
© Refer to End User License Agreement for Copyright Notice Page 110
MorphoManager User Manual
Screen 2
Select the Biometric Device(s) connected to MorphoManager that will be included in this Firmware
Update. Click Next.
Screen 3
Browse and select the firmware update version file to be applied to the Biometric Devices selected on
Screen 2. Click Finish. The tool will return to the main screen below.
© Refer to End User License Agreement for Copyright Notice Page 111
MorphoManager User Manual
The Firmware Update jobs generated will be listed on the main screen with their execution status, date
and time. Unexecuted jobs can be edited or deleted. Completed ones can be deleted. If the job status
shows it has failed, further detail can be found in MorphoManager’s Event Log.
© Refer to End User License Agreement for Copyright Notice Page 112
MorphoManager User Manual
© Refer to End User License Agreement for Copyright Notice Page 113
MorphoManager User Manual
© Refer to End User License Agreement for Copyright Notice Page 114
MorphoManager User Manual
© Refer to End User License Agreement for Copyright Notice Page 115
MorphoManager User Manual
Create a straight-through connection when connecting the Biometric Device into a Hub/Switch
Create a cross-over connection when connecting the Biometric Device directly into a computer.
For a straight-through connection match the T568B RJ45 Wire Positions to the T568B Biometric Device
TCP\IP Ethernet Wiring.
For a cross-over connection, match the T568A RJ45 Wire Positions to the T568B Biometric Device TCP\IP
Ethernet Wiring.
For a straight-through connection match the T568A RJ45 Wire Positions to the T568A Biometric Device
TCP\IP Ethernet Wiring.
For a cross-over connection, match the T568A RJ45 Wire Positions to the T568B Biometric Device TCP\IP
Ethernet Wiring.
External power supply: Must conform to CEE/EEC EN60950 standard 9V to 16 Volts ± 5% (regulated) 1.5
Amp minimum (peak) Power may come from a 12Volt Wiegand power supply, conforming to the
Security Industry Association’s Wiegand standard March 1995, able to deliver 9 Watts.
In standard operating activity, typical power consumption is 4.5 Watts. In extreme temperature
conditions, with all options (USB Flash drive, 12V output for Wiegand in), maximum power consumption
is up to 9 Watts. These Biometric Device make use of POE functionality; if Ethernet network is POE
compatible, power supply may come from Ethernet wiring.
© Refer to End User License Agreement for Copyright Notice Page 116
MorphoManager User Manual
© Refer to End User License Agreement for Copyright Notice Page 117